Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa
File:                     2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa (raw, json)
Hash identifier:          UTW041B+fvPZw0opcDxfWFaASnQX9vH0SfMI4agquKw=
Subject key identifier:   06:B5:74:7E:86:F7:70:5C:07:9D:D7:4E:8E:D8:95:E2:F0:80:20:69
Certificate issuer:       /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial:       010D0C9F43285847AE36B772BD5D45123C196C80
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     394840
IP address blocks:        2607:bd80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b7:72:bd:5d:45:12:3c:19:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=cff7ddf6-07b6-4d16-b145-d38688b801e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:76:98:9d:fd:33:ba:d3:35:63:26:6c:b9:
                    f6:6c:50:d0:52:79:ab:56:21:cc:4a:d6:3f:60:80:
                    ec:6c:f7:bd:fe:50:da:36:e6:87:99:a9:6e:95:46:
                    72:c1:e0:4b:5d:62:9d:6e:a5:4e:12:83:ce:56:45:
                    24:62:d2:6c:8b:e8:4c:b7:b8:b4:29:e5:45:6b:82:
                    b8:96:64:c1:4c:d4:40:da:d0:49:7e:42:11:ac:e9:
                    da:6b:02:1d:52:5f:a3:ad:37:50:25:7c:90:d0:ae:
                    e9:de:76:9a:c7:48:81:57:39:03:ac:b8:76:e2:67:
                    b5:ca:af:70:79:0a:6b:9d:d0:af:91:3f:12:dd:7a:
                    9d:97:8e:26:61:ad:64:92:68:65:e7:66:3e:1c:17:
                    13:6e:87:10:08:c5:02:ca:91:a7:dc:ab:95:41:00:
                    74:42:e0:6b:f4:3f:15:be:af:f2:3e:f8:40:8a:ef:
                    df:c0:fb:2e:b1:57:d5:46:3c:86:53:e2:0f:03:1c:
                    ef:fd:d5:d2:a9:d4:49:79:f7:c8:ab:25:99:a1:0b:
                    de:3e:62:c9:d6:dc:da:ec:b5:19:63:61:df:57:3e:
                    f8:54:71:6e:22:01:63:0a:37:eb:03:8c:3d:00:17:
                    25:a7:55:f4:9e:38:43:fb:dd:1b:05:0c:5a:08:c1:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B5:74:7E:86:F7:70:5C:07:9D:D7:4E:8E:D8:95:E2:F0:80:20:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl

            X509v3 Authority Key Identifier:
                keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:9f:e0:95:2d:e8:95:41:c6:7a:cc:94:0d:1e:fb:a6:7c:
         47:da:69:34:9b:85:3d:a3:94:eb:06:49:c0:09:a8:6e:97:0b:
         4e:80:d4:73:a7:b1:dc:27:b9:fb:63:1c:3c:8b:12:a5:84:ef:
         47:ac:78:e2:6f:1d:94:f4:7d:58:8e:35:07:a4:6e:4e:fa:7b:
         ec:0b:10:c5:c7:27:b8:6a:54:60:62:20:09:41:f1:c4:72:89:
         fa:da:55:78:9d:93:1b:30:11:27:d1:76:ec:a3:a9:d9:87:aa:
         57:d4:60:b8:54:4f:8c:06:09:d2:e8:7e:47:30:c4:14:d9:4d:
         56:ed:b0:c9:83:cf:85:e6:7c:3a:5f:e4:5c:70:a8:3a:4e:aa:
         be:f1:78:83:bd:8b:30:7d:09:81:32:61:1f:65:be:8a:13:cb:
         47:94:51:26:7f:43:aa:d7:c4:f1:2d:aa:4f:ee:be:af:b7:be:
         81:ef:35:e3:d7:92:5d:8f:2c:bd:6c:b2:5a:b2:81:3e:da:5b:
         f9:45:16:95:44:00:d3:c7:f3:a9:dd:9b:69:cb:1d:b1:94:bd:
         50:fa:55:f6:b3:e9:54:98:c6:cb:55:ff:fd:3c:e3:e4:d8:a7:
         ed:b0:c0:5e:95:22:9e:c9:8b:7c:44:67:53:0e:92:80:bb:a6:
         f0:bd:c0:2f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeuNrdyvV1FEjwZbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1
OGIwMB4XDTI0MTAyNzEzMDA0MVoXDTI1MDEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
Y2ZmN2RkZjYtMDdiNi00ZDE2LWIxNDUtZDM4Njg4YjgwMWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpN2mJ39M7rTNWMmbLn2bFDQUnmrViHMStY/
YIDsbPe9/lDaNuaHmalulUZyweBLXWKdbqVOEoPOVkUkYtJsi+hMt7i0KeVFa4K4
lmTBTNRA2tBJfkIRrOnaawIdUl+jrTdQJXyQ0K7p3naax0iBVzkDrLh24me1yq9w
eQprndCvkT8S3Xqdl44mYa1kkmhl52Y+HBcTbocQCMUCypGn3KuVQQB0QuBr9D8V
vq/yPvhAiu/fwPsusVfVRjyGU+IPAxzv/dXSqdRJeffIqyWZoQvePmLJ1tza7LUZ
Y2HfVz74VHFuIgFjCjfrA4w9ABclp1X0njhD+90bBQxaCMGovwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAa1dH6G93BcB53XTo7YleLwgCBpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0
OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvMmJjN2ZmMDctOWFhZi0z
ZTVlLTgwYWEtMjEyNmEwZGRhNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWYwNDk2YTgtMGNhOS00NWVjLTgy
MGYtOGU4OGMzNmU1OGIwLzFmMDQ5NmE4LTBjYTktNDVlYy04MjBmLThlODhjMzZl
NThiMC5jcmwwHwYDVR0jBBgwFoAUBdmyloInvfkN9+9ROqjQq8Wh1YwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4
YzM2ZTU4YjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge9gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBE5Z/glS3olUHGesyUDR77pnxH2mk0m4U9o5TrBknACahulwtOgNRz
p7HcJ7n7Yxw8ixKlhO9HrHjibx2U9H1YjjUHpG5O+nvsCxDFxye4alRgYiAJQfHE
con62lV4nZMbMBEn0Xbso6nZh6pX1GC4VE+MBgnS6H5HMMQU2U1W7bDJg8+F5nw6
X+RccKg6Tqq+8XiDvYswfQmBMmEfZb6KE8tHlFEmf0Oq18TxLapP7r6vt76B7zXj
15Jdjyy9bLJasoE+2lv5RRaVRADTx/Op3Ztpyx2xlL1Q+lX2s+lUmMbLVf/9POPk
2KftsMBelSKeyYt8RGdTDpKAu6bwvcAv
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:06 2024 by rpki-client on console-fra.rpki-client.org